CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 Exploit CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. The script works in the...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. Preview How to use ? root@kitploit: git...

openclaw-dashboard

OpenClaw Agent Dashboard 一个美观、安全、实时的 OpenClaw 代理监控仪表盘。在单一界面中跟踪会话、监控 API 使用情况、查看成本、管理内存文件，并掌握系统健康状态。 📸 截图 概览| 会话| 费用 ---|---|--- | | 速率限制| 实时动态| 日志 ---|---|--- | | ✨...

penelope

Penelope 是一款面向渗透测试人员和 CTF 玩家的现代化 Shell 处理器。它提供了比基本 netcat 监听器更强大的替代方案，增加了自动 PTY 升级、会话管理、日志记录、文件传输和辅助模块功能。 目录 📥 安装 ⚙️ 功能特性 🖥️ 会话功能 🌍 全局功能 🧩 模块 💻 使用方法 ▶️ 典型用法示例 🎬 随机用法演示 🖲️ 主菜单命令 ⚡ 命令行选项 🔒 安全注意事项 📝 待办事项 ❓ 常见问题 🙌 致谢早期贡献者 安装 Penelope 运行于类 Unix 系统，包括 Linux、macOS 和 FreeBSD，且需要 Python 3.6+ 。 Kali Linux...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

Exploit-For-CVE-2026-18963

CVE-2026-18963 — Toma de Control de Cuenta No Autenticada en Keycloak CVSS 9.1 Crítico · Keycloak 26.0.0 – 26.7.1 · Sin autenticación Una vulnerabilidad crítica en el flujo de restablecimiento de credenciales de Keycloak que permite a un atacante no autenticado tomar el control de cualquier cuent...

crackerjack

!CAUTION 此仓库不再维护，请访问 https://github.com/sadreck/crackerjack 获取最新版本。 CrackerJack 由 Context Information Security 开发的 Hashcat 网页界面 目录 介绍 架构 功能特点 局限性 安装 故障排除 截图 许可证 介绍 CrackerJack 是一个用 Python 开发的 Hashcat 网页图形界面。 架构 本项目旨在保持 GUI 与 Hashcat 独立。简要来说，工作原理如下： 用户上传哈希值，选择字典/规则/掩码等，然后点击“开始”。 Web 服务器生成一个新的 scre...

smb

SMB 一个用于通过SMB通信的Go包。目前仅支持客户端功能的最小实现。 以下是一个示例客户端，用于建立与服务器的会话： root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice", Domain: "corp", Workstation: "", Password: "Password123!", debug :=...

POS Codekop v2.0 - Broken Authentication

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. id: CVE-2023-36347 info: name: POS Codekop v2.0 - Broken Authentication author: princechaddha severity: high description: | A broken authentication mechanism ...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

EUVD-2026-78768

Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

CVE-2026-88262

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 RCE Autenticado Linux/POSIX Este repositorio contiene un script Proof of Concept PoC para CVE-2024-2044 , una vulnerabilidad crítica que combina Authenticated Path Traversal y Unsafe Deserialization en pgAdmin 4 versión 8.3 e inferiores ejecutándose en entornos...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

TornadoRevC2

TornadoRevC2 Un framework de post-explotación ligero y modular para investigación de seguridad autorizada, operaciones de red-team y pruebas de penetración. TornadoRevC2 gestiona sesiones de reverse shell en hosts Linux y Windows a través de una consola de operador unificada, extendiendo el manej...

SecureForce

SecureForce - Marco de Pruebas de Penetración Un marco de pruebas de penetración simplificado pero altamente capaz, construido para pruebas de seguridad autorizadas y análisis competitivo. SecureForce proporciona una interfaz intuitiva para la gestión de exploits, generación de payloads y...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Enhancedexploit This is a enhanced version of the exploit POC originally created by watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 massive shoutout to them!! This exploit is meant for research and education purposes and th...

EUVD-2026-75541

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose...

DAEnetIP4 METO v1.25 - Session Hijacking

DAEnetIP4 METO v1.25 contains improper session management in the /loginok.htm endpoint, letting attackers hijack sessions, exploit requires attacker to control or intercept session tokens. id: CVE-2025-28242 info: name: DAEnetIP4 METO v1.25 - Session Hijacking author: 0xAkoko severity: high...